HP-UX 11i Java tzupdater Release Notes

Transcription

1 HP-UX 11i Java tzupdater Release Notes HP Part Number: Published: October 2015 Edition: 1.0

2 Copyright 2015 Hewlett-Packard Development Company, L.P. Legal Notices Reproduction, adaptation, or translation without prior written permission is prohibited, except as allowed under the copyright laws. Java is a registered trademark of Oracle and/or its affiliates.

3 Contents HP secure development lifecycle HP-UX 11i Java tzupdater release notes...5 Introduction System requirements Installation How to download the latest tzdata Usage Options Error handling New tzupdater functionality: Updating time zones on demand Overriding the SHA-512 hash checks Known issues Known restrictions Removing tzupdater tool changes Documentation feedback...17 Contents 3

4 HP secure development lifecycle Starting with HP-UX 11i v3 March 2013 update release, HP secure development lifecycle provides the ability to authenticate HP-UX software. Software delivered through this release has been digitally signed using HP's private key. You can now verify the authenticity of the software before installing the products, delivered through this release. To verify the software signatures in signed depot, the following products must be installed on your system: B or later version of SD (Software Distributor) A or later version of HP-UX Whitelisting (WhiteListInf) To verify the signatures, run: /usr/sbin/swsign -v -s <depot_path>. For more information, see Software Distributor documentation at: NOTE: Ignite-UX software delivered with HP-UX 11i v3 March 2014 release or later supports verification of the software signatures in signed depot or media, during cold installation. For more information, see Ignite-UX documentation at: 4

5 1 HP-UX 11i Java tzupdater release notes Introduction The tzupdater tool allows you to update installed JDK and JRE images with the most recent time zone data to accommodate daylight saving time changes in different countries. Oracle relies on the time zone data publicly available through IANA's Time Zone Database. HP recommends using the latest HP Java SE JDK/JRE update release as the preferred vehicle for delivering both time zone data updates and other product improvements such as security fixes; however, if the end user or system administrator is unable to use the latest HP JDK/JRE update release, this tool provides a means of updating time zone data while leaving other system configuration and dependencies unchanged. For information about the time zone changes and free downloads of the tzupdater tool, see Java Daylight Savings Time (DST) Downloads and Documentation page. Introduction 5

6 2 System requirements The tzupdater tool supports HP's JDK/JRE releases 5.0, 6.0, 7.0, and 8.0 on all supported platforms. The java.vendor property value must be "Hewlett-Packard Co.". 6 System requirements

7 3 Installation Download the Z _tzupdater tar tool bundle from the tzupdater Download page to your system's local directory. Extract it in any directory and you will see a tzupdater.jar file. Use tzupdater.jar to update the new time zone changes for your JDK. For more information on how to use the tzupdater.jar file to update the time zone changes, see Usage (page 9). 7

8 4 How to download the latest tzdata You can now update the latest tzdata version in your JDK/JRE using data obtained directly from the IANA tzdata releases on the IANA tzdata page.. For more information, see Oracle site. NOTE: This version supersedes any previous versions. 8 How to download the latest tzdata

9 5 Usage The tzupdater tool modifies the JDK/JRE image used to execute the tool. A single JDK/JRE image is modified per execution. To administer the tool to multiple JDK/JRE instances, read System-Wide Usage in the Known restrictions (page 15) section. Any executing instances of the JDK/JRE to be operated upon must be stopped prior to running the tzupdater tool against that installed JDK/JRE on-disk image. Write permission on the JDK/JRE directories is required. The command-line interface is: java -jar <extract_dir_path>/tzupdater.jar [options] (Where <extract_dir_path> is the local directory where the tool bundle was downloaded.) 9

10 6 Options If no options are specified, the usage message displays. To perform time zone data updates, you must specify either the -u or -f option. -h, --help Print the usage to stdout and exit. Other options are ignored if this option is specified. -V, --version -u, --update -f, --force Show the tool version number and the tzdata version numbers of the JRE and the archive embedded in the jar file and exit. Update the time zone data and perform verification tests. The verification tests can be run separately with the -t option. If this option is specified with -h, -t, or -V options, the command displays the usage to stdout and exits. Force update the tzdata even if the version of the tzdata archive is older then the JRE's tzdata version. This option does not require the -u option for the update to be performed. Not needed under normal operating conditions. -l, --location Compile, test and update JRE timezone data from provided tzdata.tar.gz bundle. For example, -l Supported URL protocols: file:// -v, --verbose Display detailed messages to stdout. -bc, --backwardcompatible Keep backward compatibility with the three-letter time zone IDs of JDK 1.1. Any time zone IDs that conflict with the JDK 1.1 time zone IDs will be removed from the installed time zone data. This option must be specified with the -u, -f or -t option. A few time zone IDs in JDK 1.1 and the Olson time zone database IDs (industry standard IDs) conflict. As of this release, the conflicting time zone IDs are "EST", "MST", and "HST". If these IDs are used in your applications, the -bc option needs to be specified. -t, --test Runs verification tests only and exits. If the JRE has time zone data that does not match the one in the tool, the verification tests report errors and fail. The -f option is ignored if specified. If the -bc option is specified, any test cases for time zone IDs that conflict with the JDK 1.1 time zone IDs will be ignored. 10 Options

11 7 Error handling The tool tries to restore the original state when it encounters an unexpected error, such as lack of disk space. 11

12 nl 8 New tzupdater functionality: Updating time zones on demand Starting with version 2.0, the -l option allows you to point to the IANA repositories and get the tool to compile the latest tzdata sources on demand. The tool also references an https resource website for SHA-512 hash values if the -l option is specified with an http or https protocol. Therefore, any environment which operates with proxy access, will need to set the http and https proxy values while running the tool. HTTP: Dhttp.proxyHost, -Dhttp.proxyPort HTTPS: Dhttps.proxyHost, -Dhttps.proxyPort If the tool is unable to connect to the specified resource, the following socket exception displays: Exception in thread "main" com.sun.tools.tzupdater.tzruntimeexception: java.net.sockettimeoutexception: connect timed out at com.sun.tools.tzupdater.timezoneupdater.main(timezoneupdater.java:788) Caused by: java.net.sockettimeoutexception: connect timed out Automatic SHA-512 hash checks will be performed on the downloaded tzdata bundle for integrity verification. If the SHA-512 hash value does not match expectations, the tool will exit. 12 New tzupdater functionality: Updating time zones on demand

13 9 Overriding the SHA-512 hash checks When a new tzdata release is available but Oracle has not yet updated the https resource website with the new SHA-512 hash value, the following exception message displays: Exception in thread "main" com.sun.tools.tzupdater.tzruntimeexception: com.sun.tools.tzupdater.tzruntimeexception: No SHA-512 hash file found: If using http(s) resource location, the file may not yet be available. For more information, see tzupdater README. Now, you have the option to use the file:// protocol with the new -l option where you can specify your own local SHA-512 hash value by following these steps: 1. Download a copy of the desired tzdata.tar.gz bundle to a local directory. 2. Calculate the SHA-512 hash for that tar.gz bundle and create a one line file in the same local directory which contains that SHA-512 hash value. The file name must have ".sha512" appended to the original name of the bundle containing the tzdata rules. For example, if you have downloaded tzdata2014a.tar.gz to a local directory, then a file named tzdata2014a.tar.gz.sha512 must also exist in the same directory and must contain the SHA-512 hash value that corresponds to the tzdata2014a.tar.gz file. 3. Use the file:// protocol to apply the new timezone data. For example, if you downloaded tzdata2014a.tar.gz to /tmp directory and created the necessary /tmp/ tzdata2014a.tar.gz.sha512 file which contains the one line SHA-512 hash value, the following command can be used to run the tzdata update: java -jar tzupdater.jar -l file:///tmp/tzdata2014a.tar.gz (Add the -v option for verbose output.) 13

14 10 Known issues Because of changes to the time zone files, swverify can no longer verify that the installed image is correct. Performing a swremove on a product image that has been updated with tzupdater results in the modified time zone files being left behind. To completely remove the product, these must be removed manually. Running tzupdater on previously patched JREs: If you attempt to run the tool on a JRE that has previously been patched with tzupdater_1.0.1a, then you must ensure the permissions on the zi directory, and all of its subdirectories and files, are set to the desired values. The permissions from the existing zi directory are used for any newly created or patched zi directory. Alternatively, the previous tzupdater patch can be backed out by following the steps in Removing tzupdater tool changes (page 16), before running the latest tool. 14 Known issues

15 nl nl nl nl nl nl 11 Known restrictions The tool has a few restrictions due to the Time Zone API and implementation constraints: "America/Indiana/Vincennes" and "America/Indiana/Petersburg" include a future change tzdata2007g. With tzdata2007g, the timezones of "America/Indiana/Vincenes" and "America/Indiana/Petersburg" include a future change in their GMT offset value. Both these timezones move from CST to EST on November 4, The JDK version implementation of java.util.timezone.getavailableids(int) will return values based on the future GMT offset, namely the one that will be valid after November 4, Using JRE software that has been updated with tzdata2007g, a call to the method java.util.timezone.getavailableids( ) will include return values of Vincenes and Petersburg even though this only becomes correct after the changeover on November 4, Time Zone Display Names This tool will not update time zone display names of time zones that are completely new or have display name related changes. The complete support of all time zone display names requires installation of the latest HP Java SE JDK/JRE update release. System-Wide Usage Any executing instances of the JDK/JRE to be operated upon must be stopped prior to running the tzupdater tool against that installed JDK/JRE on-disk image. It is possible for systems to create multiple copies of JDK/JRE images, so one may need to apply the tool individually to each JDK/JRE image. The following information explains how to locate multiple installed copies of the JDK/JRE on HP-UX systems: 1. To help the user find and update multiple JDK/JRE, the tool comes with two scripts: SearchAndReplaceTZ: Search and Update installed JDK/JRE which are supported by the tool. execcmd: Used within the SearchAndReplaceTZ script 2. The user can use the script as follows to update supported JDK/JRE: <tool_dir>/searchandreplacetz <search_dir> Where, tool_dir : the directory where the DST tool is installed search_dir : the directory which the user wants to search JDK/JRE in. This can be optional. NOTE: The SearchAndReplaceTZ script search results will also include JDK/JRE versions other than the supported JDK/JRE (5.0, 6.0, 7.0, 8.0) such as 1.2.2, 1.3.1, 1.4.0, and The tool will also try to patch these, which will result in java.lang.unsupportedclassversionerror error since patching them is not supported. To patch JDK/JRE, you must to use the specific tool. 15

16 12 Removing tzupdater tool changes Any executing instances of the JDK/JRE to be operated upon must be stopped prior to running the tzupdater tool against that installed JDK/JRE on-disk image. A tzupdater modification removal tool does not currently exist. You can manually remove the modifications made by the current tzupdater tool by following these steps: 1. Locate the tzmappings file and zi directory under the modified $JAVAHOME/jre/lib directory. This is the newer data. 2. Locate a tzmappings.tzdata* file and zi.tzdata* directory in the same $JAVAHOME/jre/lib directory. This is the replaced, older data. 3. Obtain the currently installed time zone data version from the command java -jar tzupdater.jar -V. 4. Rename the current tzmappings file and zi directory to tzmappings.tzdata2010c and zi.tzdata2010c or, whatever the version emitted by the command in step 3. Make sure this does not conflict with any old tzmappings file or zi data directory. 5. Rename the preferred version of the tzmappings file and zi directory to tzmappings and zi. 6. Validate the change in currently active time zone data by executing java -jar tzupdater.jar -V. 7. Restart applications on this JDK/JRE. For JDK 8 and later family versions: 1. Locate the tzdb.dat file under the modified JAVAHOME/jre/lib directory. This is the newer data file. 2. Locate the tzdb.dat file in the same JAVAHOME/jre/lib directory. This is the replaced, older data file. 3. Obtain the installed time zone data version from the command java -jar tzupdater.jar -V. 4. Rename the current tzdb.dat file to something like tzdb.dat., or to the version that was given by the command in step 3. Ensure this name does not conflict with the older data files. 5. Rename the older data file to tzdb.dat. 6. Validate the change in currently active time zone data by executing java -jar tzupdater.jar -V. 7. Restart applications on this JDK/JRE instance as desired. 16 Removing tzupdater tool changes

17 13 Documentation feedback HP is committed to providing documentation that meets your needs. To help us improve the documentation, send any errors, suggestions, or comments to Documentation Feedback Include the document title and part number, version number, or the URL when submitting your feedback. For more information about support policies of HP-UX, see HP-UX support policy. 17